Out-of-Bounds Access in Linux Kernel Octeontx2-AF Driver

Executive Summary

This is a vulnerability in the Linux kernel affecting the octeontx2-af driver. The issue involves an out-of-bounds array access in the cgx_speed_mbps array, which has only 13 elements. The RESP_LINKSTAT_SPEED response can return values from 0 to 15, and if it returns a value 13 or higher, it causes an out-of-bounds access. A bounds check has been added to prevent this by defaulting to speed 0 if the index is out of range.

Useful 0 Not Useful 0

Detection Guidance

This vulnerability involves an out-of-bounds array access in the Linux kernel's octeontx2-af driver. Detection requires checking kernel logs for crashes or errors related to the CGX module. Monitor for kernel oops messages or system hangs after network operations. No specific commands are provided in the context.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability could lead to memory corruption or crashes in systems using the affected Linux kernel component. It may cause instability or denial of service if exploited, particularly in systems with Marvell OcteonTX2 hardware.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability does not directly affect compliance with GDPR, HIPAA, or similar standards. It is a low-level kernel issue involving an out-of-bounds array access in the Marvell OcteonTX2 network driver, which could lead to system instability or crashes but does not involve data exposure or privacy violations.

Useful 0 Not Useful 0

Mitigation Strategies

Update the Linux kernel to a patched version where the bounds check has been added. If immediate patching is not possible, restrict network operations involving the octeontx2-af driver until the update is applied.

Useful 0 Not Useful 0